diff --git a/.gitignore b/.gitignore
index 4bbef2b..e7f2c5a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
-SOURCES/kernel-rt-3.10.0-1160.15.2.rt56.1152.tar.xz
+SOURCES/kernel-rt-3.10.0-1160.21.1.rt56.1158.tar.xz
 SOURCES/rheldup3.x509
 SOURCES/rhelkpatch1.x509
diff --git a/.kernel-rt.metadata b/.kernel-rt.metadata
index 0811c7e..9d1ef82 100644
--- a/.kernel-rt.metadata
+++ b/.kernel-rt.metadata
@@ -1,3 +1,3 @@
-62cbc6cf735cae386acb68dc676a3e232d02e6f4 SOURCES/kernel-rt-3.10.0-1160.15.2.rt56.1152.tar.xz
+bd86f810347fa1d13044289a905c19ba8012ead2 SOURCES/kernel-rt-3.10.0-1160.21.1.rt56.1158.tar.xz
 95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509
 d90885108d225a234a5a9d054fc80893a5bd54d0 SOURCES/rhelkpatch1.x509
diff --git a/SOURCES/kernel-3.10.0-x86_64-rt-debug.config b/SOURCES/kernel-3.10.0-x86_64-rt-debug.config
index 820f843..36f6a54 100644
--- a/SOURCES/kernel-3.10.0-x86_64-rt-debug.config
+++ b/SOURCES/kernel-3.10.0-x86_64-rt-debug.config
@@ -2744,7 +2744,7 @@ CONFIG_ISDN_HDLC=m
 #
 CONFIG_INPUT=y
 CONFIG_INPUT_LEDS=y
-CONFIG_INPUT_FF_MEMLESS=m
+CONFIG_INPUT_FF_MEMLESS=y
 CONFIG_INPUT_POLLDEV=m
 CONFIG_INPUT_SPARSEKMAP=m
 # CONFIG_INPUT_MATRIXKMAP is not set
diff --git a/SOURCES/kernel-3.10.0-x86_64-rt-trace.config b/SOURCES/kernel-3.10.0-x86_64-rt-trace.config
index 981af4a..dec4839 100644
--- a/SOURCES/kernel-3.10.0-x86_64-rt-trace.config
+++ b/SOURCES/kernel-3.10.0-x86_64-rt-trace.config
@@ -2742,7 +2742,7 @@ CONFIG_ISDN_HDLC=m
 #
 CONFIG_INPUT=y
 CONFIG_INPUT_LEDS=y
-CONFIG_INPUT_FF_MEMLESS=m
+CONFIG_INPUT_FF_MEMLESS=y
 CONFIG_INPUT_POLLDEV=m
 CONFIG_INPUT_SPARSEKMAP=m
 # CONFIG_INPUT_MATRIXKMAP is not set
diff --git a/SOURCES/kernel-3.10.0-x86_64-rt.config b/SOURCES/kernel-3.10.0-x86_64-rt.config
index 3db9fe5..ba9acd2 100644
--- a/SOURCES/kernel-3.10.0-x86_64-rt.config
+++ b/SOURCES/kernel-3.10.0-x86_64-rt.config
@@ -2742,7 +2742,7 @@ CONFIG_ISDN_HDLC=m
 #
 CONFIG_INPUT=y
 CONFIG_INPUT_LEDS=y
-CONFIG_INPUT_FF_MEMLESS=m
+CONFIG_INPUT_FF_MEMLESS=y
 CONFIG_INPUT_POLLDEV=m
 CONFIG_INPUT_SPARSEKMAP=m
 # CONFIG_INPUT_MATRIXKMAP is not set
diff --git a/SPECS/kernel-rt.spec b/SPECS/kernel-rt.spec
index a2be285..20ae122 100644
--- a/SPECS/kernel-rt.spec
+++ b/SPECS/kernel-rt.spec
@@ -6,10 +6,10 @@ Summary: The Linux Realtime kernel
 %global dist .el7
 
 # realtimeN
-%global rtbuild 1152
+%global rtbuild 1158
 
 # RHEL7 build number
-%global rhel_build 1160.15.2
+%global rhel_build 1160.21.1
 
 # The preempt RT patch level
 %global rttag rt56
@@ -1454,9 +1454,84 @@ fi
 %endif
 
 %changelog
-* Fri Jan 22 2021 Chris White <chwhite@redhat.com> [3.10.0-1160.15.2.rt56.1152.el7]
-- [rt] Update source tree to match RHEL rhel-7.9.z tree [1906133]
+* Tue Feb 23 2021 Chris White <chwhite@redhat.com> [3.10.0-1160.21.1.rt56.1158.el7]
+- [rt] Update source tree to match RHEL rhel-7.9.z tree [1917909]
+- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
+- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
+- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
+- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
+- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
+- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
+- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
+- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
+- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
+- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
+- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
+- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
+- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
+- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
+- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]
+
+* Fri Feb 19 2021 Chris White <chwhite@redhat.com> [3.10.0-1160.20.1.rt56.1157.el7]
+- [rt] Update source tree to match RHEL rhel-7.9.z tree [1917909]
+- [rt] Revert "[kernel] timer: Fix potential bug in requeue_timers()" (Chris White)
+- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
+- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
+- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
+- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
+- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
+- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
+- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}
+
+* Fri Feb 19 2021 Chris White <chwhite@redhat.com> [3.10.0-1160.20.1.rt56.1156.el7]
+- [rt] Update source tree to match RHEL rhel-7.9.z tree [1917909]
+- [rt] Revert "[kernel] timer: Fix potential bug in requeue_timers()" (Chris White)
+- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
+- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
+- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
+- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
+- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
+- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
+- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}
+
+* Thu Feb 11 2021 Chris White <chwhite@redhat.com> [3.10.0-1160.19.1.rt56.1155.el7]
+- [rt] Update source tree to match RHEL rhel-7.9.z tree [1917909]
+- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
+- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
+- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
+- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}
+
+* Mon Feb 01 2021 Chris White <chwhite@redhat.com> [3.10.0-1160.18.1.rt56.1154.el7]
+- [rt] Update source tree to match RHEL rhel-7.9.z tree [1917909]
 - [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
+- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
+- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
+- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
+- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}
+
+* Tue Jan 26 2021 Chris White <chwhite@redhat.com> [3.10.0-1160.17.1.rt56.1153.el7]
+- [rt] Update source tree to match RHEL rhel-7.9.z tree [1917909]
+- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
+- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
+- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
+- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
+- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
+- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
+- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]
+
+* Wed Jan 20 2021 Chris White <chwhite@redhat.com> [3.10.0-1160.16.1.rt56.1152.el7]
+- [rt] Update source tree to match RHEL rhel-7.9.z tree [1906133]
+- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
+- [net] fix struct pid memory leak (Jay Shin) [1901797]
+- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
+- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
+- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
+- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
+- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
+- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
+- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
+- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
+- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]
 
 * Mon Jan 18 2021 Chris White <chwhite@redhat.com> [3.10.0-1160.15.1.rt56.1151.el7]
 - [rt] This is to fix a previous merge in which an additional call to write_unlock_irq was left in the code. (Chris White) [1906133]
@@ -99242,3 +99317,4 @@ fi
 - [kernel] kbuild: AFTER_LINK (Roland McGrath)
 - [ppc64] disable INFINIBAND_EHCA temporarily, it ftbfs (Kyle McMartin)
 - [kernel] Add RHEL_{MAJOR,MINOR,RELEASE} to top level Makefile (Kyle McMartin)
+